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PANEL 6 


Related Systens Evaluation 

The purpose of the investigation by Panel 6 was to reevaluate the 
Apollo system design in light of the failure of the CSM cryogenic oxygen 
tank which caused the abort of the Apollo 13 mission. 

Figure 1 outlines the maximum scope of the related systems evaluation 
that was considered as a result of the Apollo 13 incident. Consideration 
was limited to gaseous and liquid subsystems. Subsystems hardware is 
divided into six categories at the top of the matrix. Potential causes 
of fsdlure euid their consequences are listed vertically along the left 
side of the matrix. The rationale used in reducing the scope of the 
Panel 6 investigation to a more manageable size was: 

1. The Apollo 13 Incident was apparently an electrically induced 
failure in an oxygen tank. Therefore, emphasis should be placed on: 

a. Oxygen sind oxidizer systems 

b. Electrically induced modes of failure 

2. Subsystem fluid lines and line components without electrical 
interfaces were not included because: 

a. The probability of finding design deficiencies in these portions 
of the subsystems seemed very low in view of the ground and flight test 
experience to date. 

b. These types of components and their failure modes are not 
related to the Apollo 13 incident. 

c. The quantity of lines and components is so large that the effort 
required to evaluate these lines and components would reduce significantly 
the effort available for the Apollo 13 related systems investigations. 

Note that an exception has been made to include a review of the 
compatibility of nonmetallic materials in all high pressure (20 psi) 
oxygen and oxidizer subsystem components. 

3. Fluid line components with electrical interfaces in non-oxygen/ 
oxidizer subsystems were also eliminated for the same reason listed under 
item 2. 

4. For fluid line components with electrical interfaces in oxygen/ 
oxidizer systems, the investigation was limited to that portion of the 
system with pressures greater than 20 psi. The low pressure portion of 
the oxygen systems was reviewed thorougllLy after the Apollo 204 accident 
and heis been under rigorous control since then. 



5. The investigation of fracture mechanics as a potential cause 
of GSE tank failure has not been included because of the large safety 
factors employed in GSE tank design. For the spacecraft and GFE 
subsystems, fracture mechanics has not been included in this investiga- 
tion due to a separate review being conducted by the Structures and 
Mechanics Division, Directorate of Engineering and Development, MSC. 

6. Manufacturing and process discrepancies as a potential cause 
of failure were only considered for those tanks which had internal 
electrical components and those oxygen and oxidizer line components 
which had direct contact between fluid and electrical elements. A 
general manufacturing and process review wels well beyond the scope of 
this evaluation. Those types of tanks and components described were 
judged to be the most probable sources of inflight failures due xo 
manufacturing and process discrepancies for the types of subsystems 
included in the matrix. 

7. Contamination as a source for either mechanical or chemically 
induced failure of a subsystem has not been included in the investigation 
because: 

a. Cleaning and filtering techniques employed in the program have 
been generally effective in limiting contamination. Sampling is performed 
on most fluids and gas systems during loading as a final check. 

b. The identification of all potential sources of contamination 
and the consequences to each subsystem were beyond the capability of 
resources and time available. 

c. Contamination is not now a prime suspect of the cause of the 
ApoJJLo 13 incident. 

8. Estimates of blast and shrapnel damage potential were limited 
to tanks because there was not sufficient time to extend these estimates 
to the many lines and components. 

9. The evaluation of the consequences of a fluid spill from tanks 
or line components has been limited to an identification of the types of 
spacecraft materials which would be damaged if the fluid were released 
from the subsystem. Component damage due to a single failure within the 
component was considered as a means of assessing the acceptability of 
the component design. 

The findings of this investigation are reported in separate 
reports as follows: 
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Volume I 


Summary 

Volume II Lunar Module 

Volume III Command and Service Module 

Volume IV. Government Furnished Equipment and 
Ground Support Equipment 

Table 1 lists the pressure vessels reviewed and classifies them 
with regard to their damage potential if they should exceed burst 
pressure. 

Table 2 classifies the components of the CSM, and GFE which 
were reviewed with regard no the nature of the fluid/electrical interface 
and the type of fluid. Appendix A contains the cross sectional diagrams 
and circuit protection diagrams for those components having direct 
contact with oxygen or oxidizer. 

Table 3 describes the application of Teflon derivative materials 
under hi^ mechanical and pneumatic stress conditions. 

The conclusions of the panel were as follows: 

1. LUNAR MODULE (IM) 

a. None of the electrical components investigated constitute 
ignition sources in their normal operating mode's. Only the PQGS 
normally exposes electrical devices directly to the pressurized fluid. 

After thorough analysis it is concluded that adequate circuit protection 
is provided to preclude ignition. 

b. With respect to materials compatibility, it is concluded that 
materials in all components, operating in their normal modes, are 
compatible with their respective fluid environment. 

c. There are instances of single point failures where internal 
structural failures can expose non-compatible materials to the fluid 
environment. Each of these has been assessed and, from the nature of 
this failure, declared to be an acceptable risk. 

d. Based on literature search on the subjects of the capability of 
oxidizer or fuel to support combustion of the various nonmetallic 
materials at elevated temperatures, and impact sensitivity of CNR, EPR, and 
Butyl rubber in oxidizer or fuel, it is concluded that no substantive 

data are available on either subject. 

e. Based on a review of the normal operating modes of the various 
high pressure systems, it is concluded that the IW pressure vessels are 
protected with adequate redundancy against failures of such mechanical 
components as pressure regulators, check valves, relief valves, and burst 
discs. In addition, all of the high pressure systems in the LM are 
designed with adequate structural factors of safety. 
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f. Because there are no electrical components in the LM pressure 
vessel systems that can intentionally or accidently increase tank 
pressures a significant amount, the only realistic failure mechanism 
would appear to be the loss or degradation of thermal blankets. Such 

a failure could expose the tanks to direct solar heating. Analysis has 
shown that relatively short periods of attitude hold are required 
(1/2 - 2 hours) to obtain a hazardous pressure and temperatiu’e increase 
in the gaseous He tanks. If the M were manned, then such a failure 
would be detected and corrective action could be taken. The period of 
most concern is translunar coast, when the IM is unmanned and unmonitored 
However, a passive thermal control mode (slow rotation) is normally 
employed during this mission phase which results in alternate intervals 
of solar heating and deep space cooling. EL^tended attitude holds are 
possible during this phase; however, except for the gaseous He tanks, all 
tanks remain within design limits for attitude hold periods up to 
four hours. Wrapping of the gaseous He tanks with H-film could reduce 
the absorption of solar energy so that attitude holds of at least four 
hours would be permissible. The probability of undetected thermal 
blanket loss has been investigated, resulting in the conclusion that 
loss or degradation of significant blanket area is not a realistic 
possibility in view of the fastening techniques aiid forces available 
during the various mission phases (e.g. launch and boost, SLA 
deployment and ejection). 

g. It is concluded that ai. oxygen leak on IM exterior materials 
does not present a problem since the insulation blankets and micro- 
meteoroid shield will only maintain a pressure of less than 0,1 psi 
without rupturing. Combustion would not be supported at such a low 
pressure. 

h. The entire LM has not been designed to be compatible with 
K20^. or A-50. If an oxidizer or A-50 tank were to leak or 

spill its contents, many non-compatible materials would be exposed. The 
LM is leak checked before a mission to an extremely tight specification; 
therefore, tankage leaks should not exist for a normal mission, 

i. The study of KOH spillage cor .eluded that of the metallic 
materials, only aluminum has shown a tendency to corrode. The space 
environment shoiild preclude even the aluminum reaction, because of 
rapid vaporization of the water from the electrolyte and its subsequent 
freezing. One possible area of concern is the fracture mechanics stress 
corrosion effects of a KOH spill on a highly stressed pressure vessel, 
such as a gaseous helium bottle. Wo information is available on this 
subject, KOH cannot be spilled from any of the M batteries even if 
the case vents do not function properly, unless there is an accompanying 
electrical failure. The IM batteries all have vent valves to relieve 
product gases. If the vent valves were to fail, the primary batteries 
would relieve through the gasket cover, whereas the pyro battery cases 
would split. In either case there is little possibility of an explosive 
battery case rupture. The primary battery vent valves are operationally 
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checked just prior to vdiicle installation. A similar check will be made 
cw the pyro batteries. There are no data on the burst charscteristics of 
the batteries. MSC is in the process of obtaining these data. It is con- 
cluded that the spillage of KOH is extremely unlikely, and, combined with 
the possibility of getting on a highly stressed pressure vessel, the risk 
is acceptable. 

j. It is impractical to protect the IM against a fragmentary failure 
of any pressure vessel; therefore, the system design must preclude this type 
of failure. 

2. COMMAND AND SERVICE MODULE (CSM) 

All subsystems and conponents reviewed are considered acceptable with 
the follcwing exceptions: 

a. Environmental control system (ECS) 

The quemtity gaging system (including the electronics) in the potable 
water and waste water tanks is exposed to oxygen at pressures of 25 psia 
during flight and 35 psia during countdown. The electronics is supplied by 
28 Vdc throu^ 'two 5 Mrp circuit breakers . The acceptability of this 
design will require additional ignition tests which have already been ini- 
tiated. 

The following tasks were not conpleted during the ECS review due to 
lack of detailed ccoponent information: 

(1) Review of cyclic accianulator 0^ control valve 

(2) Review of 0^ flow transducer 

(3) Review of 0^ pressure transducer, 100 psi system 

(4) MSC review' of nonmetallics , which are used on FCS Og line 
components, that NR has accepted by similarity. 

(5) Verify that no electrical source could come in contact with 
the 100 or 9 OO Psi aluminum lines in the Og control panel and the ECU. 

The required information is being assembled by the contractor and the 
review will be completed. 

b. Electrical power system (EPS) 

It was not possible to establish the acceptability cr vuiacceptability 
of the cryogenic hydrogen tank design. Sufficient information could not 
be found in the literature to conclusively state that shorting of the in- 
ternal electrical conponents of the tank would not initiate a sustained 
reaction of some kind which could eventually either fail the tank or destroy 
all internal functional capability. The necessary tests to resolve these 
issues have been initiated. 
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Even if such sustained reactions are shown not to exist, it is not 
possible to determine whether shorting of a single internal component will 
or will not dameige through propagation to enovigh of the other internal func- 
tions of the H2 tank to cause a mission abort. The necessary tests to 
determine the extent of propagation have been initiated. 

Compatibility tests are required to establish the acceptability of 
solder and brass in and have been initiated. 

The direct contact between high pressure gaseous oxygen (935 psi) and 
Teflon-covered power wiring which cannot be inspected after final eisnembly, such 
as in the fuel cel] oxygen shut off solenoid, is considered an unacceptable 
design. 

The O2 purge valves and reactant pressure regulator have nonmetallic 
materials in high mechanical stress applications whose acceptability could 
not be unconditionally established. The necessary impact tests have been 
initiated. Ti.e pressure switch and the pressure transducer in the O 2 system 
valve module and the pressure transducer in the fuel cell are conditionally 
acceptable pending receipt of further detailed information. 

Pyro and entiy battery test data are not sufficient to establish pres- 
sure capability and acceptance procedures and not adequate to insure satis- 
factory quality control during manufacturing. The necessary test will be 
performed to provide this assurance. The batteries are believed to have 
the required pressure capability. 

c. Service propulsion system (SPS) 

It was not possible to establish the acceptability or unacceptability 
of the direct contact of electrical components and Teflon with oxidizer and 
fuel which exists in the SPS quantity gaging sensors. Analysis indicates 
there should be no problem. Test have been initiated to confirm this anal- 
ysis. 


Compatibility (reactive decomposition of A-5O with Kovar or Ni-Span-C) 
tests are required and have been initiated to establish the acceptability of: 

(1) Kovar in Aerozine 50 

(2) Ni-Span-G in Aero.’.ine 50 

(3) Solder in NgOj^ (flammability) 

3. GOVERNMENT FURNISHED EQUIPMENT (GFE) AND GOVERNMENT SUPPORT 
GFE 

AIJ GFE pressure vessels and oxygen systems are considered satisfactory 
with the following exception: 
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The -7 HiSS 0 bottle should not use asted Arde material since the 
predicted failure mode at maximum design operating pressure is by fracture 
rather than by leakage, as in the -6 FLSS. A decision has been made to 
replace this material. 

GSE 

Oxygen Systems 

The available information on the GSE oxygen systems was not sufficient 
to verify the acceptability of the design with respect to: 

a. Impact sensitivity of nonmetallic materials application. 

b. Characteristics of electrical component interfaces with oxygen. 

c. Accumulation of contaminants. 

The required information is being assembled to conqplete the review. 
Usage experience indicates no problem areas. 

I^drogen Dewar 

Review of the hydrogen dewar indicates that the design and procedures 
are acceptable with the following exceptions: 

a. The possible presence in the system of shock sensitive materials. 
Accumulation of these materials over a period of time may cause quantities 
to exceed the maximum allowable. An Investigation has been initiated to 
determine if such accumulations can occiir. 

b. Component failures have occurred where external leakage of gaseous 
hydrogen was detected. A review of the need for more frequent servicing or 
redesign of these components has been initiated. 
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The reccoimiendations of Panel 6 aro; 

1 . GENERAL 

a. Re-evaluate the desirability of adding acceptance vibration 
testing on tanks with internal electrical ccnqponents. 

b. Broaden the present materials controls to assure MSC sur- 
veillance of all materials requirements and applj.cations . 

c. Conduct intentional favilt tests on all spacecraft con^jon- 
ents where combustion is possible to assure adequate design 
margins and circuit protection. 

2 . LUNAR MODULE (LM) 

a. The gaseous helium tanks should be wrapped with a single 
layer of H-film to preclude the effects of KOH attack 
fTcan battery spillage and to reduce the effects of direct 
solar heating. 

b. The pyro battery activation procedure should be modified 
to include vent valve checkout. 

c. The requirement for the APS propellant level detector 
should be investigated further, and the units should be 
removed or inerted if found to be unnecessary. 

d. Additional materisds testing should be conducted in those 
areas where a general lack of engineering data have been 
discovered. 

Specifically, the following tests should be conducted: 

(1) GOX impact tests of all LM system impact applica- 
tions. 

(2) Combustion and ignition tests of appropriate LM ma- 
terials in 1^04 and A-50 I'o verify analytical con- 
clusions of this stufly. 

(3) Impact tests of all nonmetallics in IM 1^04 and A-50 
in^jact applications. 

{h) Conduct present standard Og flash and fire test at 
elevated pressures to verify the applicability of 
existing ambient data. 

e. Burst tests on batteries should be conducted. 


8 



3 


CCM4AND AND SERVICE MCT _'£ (CSK) 
a. ENVIROHMENm CONTROL SYSTEM (ECS) 


Perform analyses of the water quantify gaging system to determine the 
integrity of the transducer cover and the non-projagation of flame to 
the bladder for a worst case short in the transducer. If the results 
indicate a marginal factor of safety, perform a test using actual hard- 
ware for both flight and ground conditions. At the time, the re- 
quirement for a water quantity gaging system should be re-examined to 
determine if it is mandatary for fli^t. 


Con^dete the ECS reviev for the following: 

(1) Cyclic accxmulatcr 0^ control valve 

( 2 ) 0^ flew transducer 

( 3 ) 0 ^ pressu 3 transducer, 100 psi system 

Con 5 )lete the review of all nonmetaHics on Og line components that NR 
has accepted by similarity. If txny aonmetal 1 ics are found not acceptable 
for high pressure Og then review the components, which contain these non- 
metallics, with the guidelines for lliis study. 

b. ELECTRICAL POWHl SYSTSI (EPS) 

Test plans already initiated should be ccnqjleted to determine irtiether: 

( 1 ) Sustained reactions can be initiated by means of 
electrical shorts in the CSM cryogenic hydrogen tank 
wiring. If reactions can be initiated, are they s^lf- 
ficiently energetic to ri 5 )ture the hydrogen tank or 
lines? 

( 2 ) If no sustained reactions can be identified, can a 
single electrical short within the tank or conduit 
result in failure of enoigh tank functions (heaters, 
fan, quantity, temperature) to result in a mission 
abort? 

Conplete the redesign of the fuel cell oxygen shutoff valve (or system) 
already initiated. 

Proceed with the MSC tests of imp€ict of nonmetallic materials in high 
pressure oxygen to resolve the issues associated with the oxygen purge 
valve end reactant pressure regulators. 
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Reviev expected information on oxygen system valve module pressure switch 
and pressure transducer and fuel cell pressure transducer to determine 
validity of concliisions reached to date and tate necessary action if 
proven invalid. 

Complete the testing alreeidy initiated to determine the burst capability 
of the entry and pyx*o battery cases and modify the acceptance test pro- 
cedure to include a proof pressure test consistent with the results of 
the burst test. 

c. SERVICE PROPULSION SYSTIM (SPS) 

Cc«i 5 )lete the testing already initiated to determine whether sustained re- 
actions can be initiated in the SPS quantity gaging sensors within the 
energy limits of each application. 

d. Complete the testing already initiated to resolve the com- 
patibility issues mentioned in the CONCLUSIONS SECTION. 

e. Review all pressure vessel acceptance criteria, test emd 
checkout procedures and operational procedures. 

h. G0V5EHME1T FIEKTSHED BQUrPMENT (GFE) AND GEOUND SUPP(fflT EQUIP- 
MENT (G3E) 

a. GOViEIMESff FIEICESHED BQUIPMEBT (GFE) 

The material in the -7 PLSS pressure vessel should be changed to one 
having a failing mode of leakage rather than fracture at maximum design 
operating pressure. 

Analysis should be made of the effect of releasing the contents of the 
life raft Cp 2 bottle into the CM cabin. 

b. GROIM) SUPPORT EQUIPMENT (GSE) 

Obtain the necessary information to complete the evaluation of the GSE 
oxygen systems. 

Perform a review of the hydrogen dewar system to determine any soiirces 
of contamination and the constituents. This study should include metal- 
lic as well as nonmetallic contamination and should investigate the ac- 
cumulation of contaminants over a period of time. 

Investigate ccmponents in the hydrogen dewar system that have demon- 
strated excessive failures to determine the necessity of periodic chsuige 
of soft goods or possible redesign. 
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X INCLUDED IN PANEL 6 EVALUATION 




































TABLE 1 - CHAilACTERISTICS OF PRESSURE VESSELS REVIEWS 


(a) CM TANK SUMMARY 


PRESSURE 

VESSEL 

fm 

INTERNAL 

COMPONENTS 

(NOTE 1 ) 

PRESSURE, PS I 

MAXIMim 
TNT(LBS) 
EQUIVALENT 
AT BURST 
PRESSURE 
(EA TANK) 

j 

FRACTURE 

MODE 


REMARKS 

NORMAL 

LIMIT 

PROOF 




RCS 

Helium 

8 

Metallic 

4240 

5000 



0.143 

Fragment 

A 


ECS 

Oxygen 

Surge 

■ 

Metallic 

910 

1020 

1356 

2150 

0.12<^ 

Rupture* 

A 



a 

Non-metalllc 

295 

360 

480 

885 

0.050 

Rupture 

A 


RCS Prop. 
Fuel 

2 

Non-metallic 

295 

360 

480 

io4o 

o.o4i 

Rupture 

A 


Cabin Repress. 
Oxygen (ECS) 

3 

None 

910 

1210 



0.068 

Leak 

C 


Glycol 

Reservoir (ECS 

) 1 

Non-metallic 

50 WG 

8-2702 


90WG 
4o Og 

420 

0.002 

Leak 

c 


Potable 
Water (SCS) 

1 

Electrical 

i8-22 

HoO 

18-27 

O2 

48 HpO 
27 O2 

64 HgO 
40 Og 

*100Hp0 

*100 Og 

0.008 

Leak 

c 

*Deslgn 

Waste Water 
(ECS) 

2 

Electrical 

18 HgO 

18-27 

Op 

1e0H20^ 

270 g 

64HoO 

4o Og 

I 3 OII 0 O 
110 Og 

0.015 

Leak 

c 


Life Raft 
EYessure 

2 

None 


4500 



0.014 

Leak 



c 





































































TABLE 1 - CONTINUED 


(b) SM TANK SUMMARY 




INTERNAL 

COMPONENTS 

(NOTE 1) 

PRESSURE, FST 

MAJilMUM 
TNT(LBS) 
EQUIVAK-lNT 
AT BURST 
PRESSURE 
(EA TANK) 

FRACTURE 

MODE 

BiJftST DAMAGE 

POTENTIAL 

CLASS: 

(NOTE 2) 

■ 

NORMAL 

LIMIT 

PROOF 


5PS Helium 

2 

None 

3585 

3685 

4910 

6250 

13.95 

Fragment 

A 


BPS Prop. 
Oxidizer 

S 

Electrical 

182 

225 

300 

413* 

3.88 

Fragment 

A 


BPS Prop. 
Fuel 

2 

Electrical 

182 

225 

300 

413* 

3.88 

Fragment 

A 

SMI 

RCS Helium 

k 

Metallic 

4240 


5985 

7310 

0.40 

Fragsment 

A 

— 

SPS GN2 

2 

None 

2550 

2900 

5000 

9820 

o.o4 

Fragment 

A 


Pan Camera 
GNg 

1 

None 

4000 

4500 

5985 

7310 

0.60 

Fragment 

A 


RCS Prim. 
Oxidizer 

k 

Non-metal 11c 

192 

248 

331 

567 

0.061 

Rupture 

B 


RCS Prim. 

Fuel 

— -- - - - 1 

4 

Non-metallic 

192 



603 

0.06 

Rupture 

B 

- - 




1 

285 

379 

771 

0.30 

Leak 

C 


RCS Sec. , 

Oxidizer ^ Non-metallic 

192 

248 

480 

885 

1 

0.05 

Leak 

C 



B 


1 1 

248 48o ;io4o ’0.05 

‘ : « 

leak 

C 

— 

] 

Fhael Cell 
Pressure GN2 

3 




i j ' 

3000 1 9400 io.02 ILeak 

^ 1 L - - 

C 





















































































TABLE 1 - CONTINUED 


(c) LM TANK SUMMARY 


PRESSURE 

VESSEL 

NO. 

OF 

TANKS 

INTERNAL 

COMPONENTS 

(NOTE 1) 

PRESSURE, FSI 

MAXIMUM 

tnt(lbs) 
EQUIVALENT 
AT BURST 
PRESSURE 
(EA TANK) 

FRACTURE 

MODE 

BURST DAMAGE 

POTENTIAL 

CLASS: 

(NOTE 2) 

REMARKS 

NORMAL 

LIMIT 

PROOF 

LOWEST 
DOC TEST 
BURST 

RCS (a/s) 

Oxidizer 

2 

Non-metallic 

180 

250 

333 

767 

0.0645 

Fragment 

A 


APS (a/s) 
Oxidizer 

1 

Electrical 

184 

250 

333 

452 

2.08 

Rupture 

A 


a/s ECS 
Oxygen 

2 

None 

840 

1000 

1370 

2010 

0.194 

Fragment 

A 


RCS (a/s) 
F\iel 

2 

Non-metal lie 

l8o 

250 

333 

584 

0.107 

Fragment 



A/S ECS 
Water 

2 

Non-metallic 

47.3 

50 

64 

314 

0.026 

Fragment 

A 


DPS Prop. 
Oxidizer 

2 

Electrical 

248 

270 

375* 

360** 

44o 

3 92 

Rupture 

A 

*m-6, 

-8, -9 

**LM-10 

BUbS 

DPS Prop. 
Fuel 

2 

Electrical 

2^5 

i - 

270 

3/5* 

360** 

“injo 

3.92 

Rupture 

A 

*im- 67" 
-8, -9 

**M-10 

subs 


1 

Non-metallic 

Iggjjll 

3000 

ign 

5200 

T^o 

Fragment 

A 


gnn 

1 

Metallic 


1710 

2274 

3425 


Fragment 

A 


DPS AraUlent 
Helium 

1 

None 


1750 

2327 

3100 

■1 

Fragment 

A 




















TABLE 1 - CONTINUED 


(d) GSE - GFE TANK SUMMARY 


PRESSURE 

VESSEL 

WM 

INTERNAL 

COMPONENTS 

(NOTE 1 ) 

PRESSURE. PSI 

TNT 

EQUIVALENT 
AT BURST 
PRESSURE 
(LBS) 

) 

FRACTURE 

MODE 

DAMAGE 
POTENTIAL 
CLASS: 
(NOTE 2 ) 

REMARKS 

NORMAL 

LIMIT 

PROOF 


GSE LHg 
Dewar Assy 

1 

Electrical 

20 

33 



0.185 

Iftiknown 

Iftiknown 

*Design 

-6 PLSS 
Og Tank 

2 

None 


1110 

1665 

23 h 5 

0.050 

Leak 

C 



2 

None 

lUOO 

1500 

2250 

3000* 

0.050 

Leak 

C 

^Design 

OPS 

k 

None 

5880 

6750 

10130 

ltj -700 

0.182 

Leak C 



NOTE 1 : 


Electrical = Electrical + Nonmetallic + Metallic 
Nometallic= Nonmetallic and metallic 
Meteillic = Metallic only 

NOTE 2 : 


Class A 
Class B 
Class C 


= Virtually certain loss of module due to propagation to other tanks. 

= ISicertain extent of damage. 

= Will not propagate to other tanks and therefore damage should he very limited. 

























TABLE 2 - SUMMARY OF THE COMPONENTS HAVING FLUID/E[.ECTRICAL INTERFACES OR POTENTIAL INTERFACES 

AS A RESULT OF FAILURES 


FLUID 
ELECTRICAL 
INTERFACE 


FLUID 


OXYGEN 


OXIDIZER (AND FUEL)* 


*Indicates 
on fuel 
system 
also 


SPS Propellant Sensors (Tank)* 
LM DPS PQGS* 


DIRECT CONTACT 


F/C Valve Module Solenoid Valve 

CM Water Quantity Gages 

F/c Pressure Xducer 

EPS O2 SyBtem Pressure Svitch 

EPS Og System Pressure Xducer 

EPS Oo Flow Sensor 

CSM ECS Control Valve 

CSM ECS Pressure Xducer - 

-0133, -0055, -0052 

CSM ECS Op Flow Xducer 

LM d/s ECS O2 Tank Pressure Xducer 

IM a/s ECS O2 Tank Pressure Xducer . . 

LM a/s ECS O2 Manifold Pressure Xducer 
(GFE) Primary Og Pressure Xducer 


SINGLE 

FAILURE 

FOR 

iDIRECT 

ICONTACT 


STRUCTURAL 

FAILURE 


LEAK BETWEEN 
MOVING PARTS 


SM RCS Oxidizer Pressure Xducer 
SM RCS Oxidizer Isolation Valve* 

SM RCS Oxidizer Valve* 

IM DPS Lunar Dump Valve* 

APS, DPS Oxidizer Temp Xducer* 

DPS Pilot Valve (Fuel only) 

RCS,SPC,DPS Oxidizer Pressure Xducer*: 
APS Oxidizer Pressure Xducer 
APS Pilot Valve (Fuel only) 

APS Propellant Level Detector* 

APS, DPS Propellant Pre-Valves (Fuel] only) 
IM RCS Injector Valve* 

IM RCS Solenoid Valves*’ 


yrULTIFLE 

FAILURE 

REQUIRED 

FOR 

DIRECT 

DONTACT 


F/C O2 Purge Valve 
IM a/s ECS Cabin Pressure 
Valve Solenoid 


CM RCS Purge Valve* 

CM RCS Temperature Sensor* 

CM RCS Propellant Isolation Valve* 
CM ECS Oxidizer Interconnect Valve* 
CM RCS Oxidizer Dump Valve* 

CM RCS Oxidizer Engine Injection 
Valve* (Direct and Auto) 

SM RCS Temperature Sensor* 

SM RCS Oxygen Pressure Signal Cond.- 
SPS Propellant Utilization Valve* 
SPS Oxidizer Line Heaters* 

SPS Oxidizer Line Temp Xducer* 

SPS Oxidizer Line Pressure Xducer* 








TABLE 3 - IMPACT APPLICATIONS OF TEFLON DERIVATIVES IN PURE OXIGEN AT ERESSIEES GREATER THAJI 20 PSI 


CCMPONENT NAME 
AND SUBSYSTEM 

APPLICATION 

TYPE OF 
TEFLON 

OXYGEN PRESSURE AT 
TEFLON CCMPONENT-PSI 

TEST PERFORMED TO 
ESTABLISH ACCEPTABILITY 

392 High Pressure 
Oxygen Control 
Module, LM ECS 

Gasket 

"Teflon" 

f Normal) -Vacuum 
(Half Txnction) -3OOO 

* 0/20 2000 psi MSC/EP 

505 Interstage 
Disconnect, LM ECS 

Gasket 

"Teflon" 

1 Normal) -950 

(Malfunction) -1000 

* 0/20 2000 psi MSC/EP 

390 Oxygen Control 
Module, LM ECS 

Gasket 

"Teflon" 

(Normal) -6,2 
( Malfunction) -950 

* 0/20 2000 pxi MSC/EP 

321 Fill Coupling 
LM ECS 

Poppet 

Seal 

kel-f 

(Normal) -3000 
(Malfunction) -300 

*■ 0/20 2000 psi MSC/EP 

Fuel Cell Valve 
Module, CSM EPS 
O2 Line Ccmrponent 

Ball and 
Adapter 

kel-f 

935 

* 0/20 2000 psi MSC/EP 

Og Reactant Pressure 
Regvilator, CSM EIPS 
Line Con^onent 

Poppet on 
steel seat 
inlet and 
vent 

Fluoro 

Carbon 

Rubber 

(Viton) 

935 

* O/U 2000 psi WSTF 

* 0/20 2000 psi MSC/EP 

Cyclic Accumulator 
Control Valve (I.36) 

Poppet 

U> 1 

0 

(Normal) -100 
(Malfunction) -I56 

* 0/20 2000 psi MSC/EP 

PLSS Oq Fill 
Connector 

Seal 

"Teflon" 

( Normal) -1100 

Subjected to proof 
pressure - no ignition 


NOTE: * o/Digit designates no Ignition at number of drops per specific pressure 









APPENDIX 


CROSS SECTIONAL VIEWS AND CIRCUIT 
PROTECTION DIAGRAMS FOR ALL COMPONENTS 
IN SPACECRAFT -WHICH HAVE DIRECT CONTACT 
BETWEEN FLUID (OXYGEN, OXIDIZER OR FUEL) 
AND ELECTRICAL COMPONENTS. 
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FIGURE A-1.- FUEL CELL VALVE MODULE SOLENOID VALVE. 









FIGURE A-3.- CM POTABLE AND WASTE WATER QUANTITY TRANSDUCER. 




Crew Compartment | Aft Compartment j Crew Compartment 

I I 



FIGURE A-4.- ELECTRICAL SCHEMATIC, POTABLE AND WASTE HgO QUANTITY SENSORS 
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SPS SPS CONTROL 

GAUGING BOX 





SELF LOCKING 
NUT AND 
WASHER — ^ 


3UTER ELECTRODE 


LOW LEVEL 
ELECTRODE 


INNER ELECTRODES 
SUPPORT BRACKET - 


OUTER 

ELECTRODE- 


?«UNTING FLANGE 
SKIRT 


WIRING IS TEFLON COATED 
AND IN POTTING COMPOUND 
TO THE SENSOR ELECTRON- 
ICS. WIRING LEAVING 
FLUID INTERFACES IS 
HERMETICALLY SEALED 
(GLASS INNER SEAL) 


ALL COMPONENTS IN TANK 
ARE NORMALLY WETTED 
EXCEPT AS NOTED ABOVE 


REFERENCE 

ELECTRODE- 


■WETTED AREA FOR SINGLE 
POINT FAILURE 


PQGS MOUNTING 
FLANGE^ 


plo 


P o 


PQGS 

DRAINHGL^ 


TANK 

BOnOH 



SENSOR 

ELECTRONICS 


FIGURE A-7.- PQGS SENSOR. 
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Electrodes 

in 

tank fluid 


FIGURE A-8.- PQGS SENSOR SCHEMATIC. 


^Quantity 

sensor 



PQGS 

Displays 


^ Off 



FIGURE A-9.- PQGS SYSTEM SCHEMATIC 



